From 96bdcbb4441ddf05c065bbafa88e5691300424d1 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Thu, 8 Oct 2020 12:18:41 +0200 Subject: [PATCH 50/53] negcache: make sure domain config does not leak into global Resolves: https://github.com/SSSD/sssd/issues/5238 Reviewed-by: Alexey Tikhonov (cherry picked from commit 0e1bcf77bd73baa0fea64830eb1f4f65a63c7afe) --- src/responder/common/negcache.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/responder/common/negcache.c b/src/responder/common/negcache.c index d9bf1417e..b9586f315 100644 --- a/src/responder/common/negcache.c +++ b/src/responder/common/negcache.c @@ -1048,6 +1048,7 @@ errno_t sss_ncache_prepopulate(struct sss_nc_ctx *ncache, } } + talloc_zfree(filter_list); /* Populate non domain-specific negative cache user entries */ ret = confdb_get_string_as_list(cdb, tmpctx, CONFDB_NSS_CONF_ENTRY, CONFDB_NSS_FILTER_USERS, &filter_list); @@ -1183,6 +1184,7 @@ errno_t sss_ncache_prepopulate(struct sss_nc_ctx *ncache, } } + talloc_zfree(filter_list); /* Populate non domain-specific negative cache group entries */ ret = confdb_get_string_as_list(cdb, tmpctx, CONFDB_NSS_CONF_ENTRY, CONFDB_NSS_FILTER_GROUPS, &filter_list); -- 2.21.3